General

  • Target

    fc6ab23d518f2074dbba6dd50134449407dd47a0cb73e184281d7aaf96a825ea

  • Size

    214KB

  • MD5

    c3851fee402cb7a278a5a7a43ad4dff2

  • SHA1

    b283fdecebfbf4088d7e69b0384faa72408e3819

  • SHA256

    fc6ab23d518f2074dbba6dd50134449407dd47a0cb73e184281d7aaf96a825ea

  • SHA512

    90e5295e145107d561558e7298f6797ba1810a4b790153fed387b4e163f2c3b5320b910deb554207d38fbcb84d570c9cd7c1ff3cb3ef13ae15d60152f8fe03d3

  • SSDEEP

    3072:QbHWW8AZjEHP+alVvklbUiLxWIZwVHATz9O/JfALZR0uWP/2X7g/qSeK31oWCpAE:VW8Pll10UIpSJsiHeKFoJGhWl

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot1952154144:AAEHUKomldKQIyjgq_MWw4YWiGcA_iwz6T4/sendDocument

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fc6ab23d518f2074dbba6dd50134449407dd47a0cb73e184281d7aaf96a825ea
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections